华为三层交换机配置总结.doc

一、基本命令：1保存当前配置：save configuration-file 1清除当前配置：reset saved-configuration1重启当前设备：reboot1取消单条配置：undo +要取消的配置命令1SwitchA-Ethernet0/3undo port link-type trunk1显示命令：2配置静态路由：ip route-static 目标网段 子网掩码 下一跳地址2设置trunk：2telnet登陆设置：2二、配置实例31.实例说明32拓扑图如下：4交换机名为zuo的配置：（华为5328设置）49300的配置：8交换机you的设置：（华为5328设置）94.测试12(1)vrrp正常状态下测试12(2)只断a,查看俩个交换机vrrp状态并测试pc1如何到pc213(3)只断c,查看vrrp状态并测试pc1如何到pc216一、 基本命令：保存当前配置：save configuration-file 清除当前配置：reset saved-configuration重启当前设备：reboot取消单条配置：undo +要取消的配置命令例：SwitchA-Ethernet0/3port link-type trunkSwitchA-Ethernet0/3undo port link-type trunk显示命令：display interface brief ；查看端口状态display current-configuration ；显示当前设备的所有配置信息配置静态路由：ip route-static 目标网段 子网掩码 下一跳地址例：ip route-static 192.168.1.0 255.255.255.0 192.168.1.2例：ip route-static 0.0.0.0 0.0.0.0 172.16.1.2 设置trunk：core s9303-1interface GigabitEthernet 1/0/5core s9303-1-GigabitEthernet1/0/5combo copper ;9300端口默认是光模式，改为电模式core s9303-1-GigabitEthernet1/0/5port link-type trunk-huawei5328interface GigabitEthernet 0/0/2huawei5328-GigabitEthernet0/0/2undo port default vlanhuawei5328-GigabitEthernet0/0/2port link-type trunk huawei5328-GigabitEthernet0/0/2port trunk allow-pass vlan all; 允许所有的vlan从g 0/0/2端口透传通过，也可以指定具体的vlan值telnet登陆设置：1. system-view2. S9300-A vlan 603. S9300-A-vlan2 quit4. S9300-A interface GigabitEthernet 1/0/15. S9300-A-GigabitEthernet1/0/1 combo copper6. S9300-A-GigabitEthernet1/0/1 port link-type access 7. S9303-A-GigabitEthernet1/0/1port default vlan 608. S9300-A-GigabitEthernet1/0/1 quit9. S9300-A interface vlanif 6010. S9300-A-Vlanif60 ip address 10.10.10.8 255.255.255.011. S9300-A-Vlanif60 quit12. S9300-A13. S9300-A user-interface vty 0 414. S9300-A-ui-vty0-4 authentication-mode password 15. S9300-A-ui-vty0-4 set authentication password simple 12345616. S9300-A-ui-vty0-4 quit17. S9300-A二、配置实例1.实例说明此实例测试华为三层交换机vrrp以及rip路由协议的启用，2拓扑图如下：3.配置命令交换机名为zuo的配置：（华为5328设置）system-view Quidwaysysname zuo ；给设备命名 zuovlan 20 ；创建vlanzuo-vlan20port GigabitEthernet 0/0/20 ；进入端口模式 zuo-vlan20quit zuointerface Vlanif 20 ；进入vlanif接口模式 zuo-Vlanif20ip address 20.20.20.1 24 ；添加ip zuo-Vlanif20quitzuodisplay ip int brief ；显示接口ip配置 zuointerface Vlanif 1 zuo-Vlanif1ip address 10.10.10.1 24zuo-Vlanif1quit zuovlan 60 zuo-vlan60port GigabitEthernet 0/0/6 ；把端口加到vlan中 zuo-vlan60quit zuointerface Vlanif 60 zuo-Vlanif60ip address 60.60.60.1 24zuo-Vlanif60quit zuointerface Vlanif 1 zuo-Vlanif1vrrp vrid 1 virtual-ip 10.10.10.111 zuo-Vlanif1vrrp vrid 1 priority 120 ;设置vrrp组1的优先级 zuo-Vlanif1vrrp vrid 1 preempt-mode timer delay 20 ； zuo-Vlanif1vrrp vrid 2 virtual-ip 10.10.10.112zuo-Vlanif1display vrrp ；显示vrrp配置状态zuorip ；启用rip动态路由协议 zuo-rip-1 version 2 zuo-rip-1network 10.0.0.0 zuo-rip-1network 20.0.0.0 zuo-rip-1network 60.0.0.0zuo-rip-1quitzuo-Vlanif1display ip routing-table ;查看路由表 Route Flags: R - relay, D - download to fib-Routing Tables: Public Destinations : 10 Routes : 12Destination/Mask Proto Pre Cost Flags NextHop Interface 10.10.10.0/24 Direct 0 0 D 10.10.10.1 Vlanif1 10.10.10.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 20.20.20.0/24 Direct 0 0 D 20.20.20.1 Vlanif20 20.20.20.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 50.50.50.0/24 RIP 100 1 D 20.20.20.2 Vlanif20 RIP 100 1 D 10.10.10.2 Vlanif1 RIP 100 1 D 60.60.60.2 Vlanif60 60.60.60.0/24 Direct 0 0 D 60.60.60.1 Vlanif60 60.60.60.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 100.100.100.0/24 RIP 100 1 D 60.60.60.2 Vlanif60 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0display vrrp ；显示vrrp状态 Vlanif1 | Virtual Router 1 state : Master Virtual IP : 10.10.10.111 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 120 Preempt : YES Delay Time : 20 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YES Vlanif1 | Virtual Router 2 state : Backup Virtual IP : 10.10.10.112 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 120 Preempt : YES Delay Time : 0 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YES9300的配置：system-view core s9303-1vlan 60core s9303-1-vlan60quitcore s9303-1vlan 50core s9303-1-vlan50quitcore s9303-1interface GigabitEthernet 1/0/6core s9303-1-GigabitEthernet1/0/6combo copper ；9300端口默认是光模式，改成电模式core s9303-1-GigabitEthernet1/0/6port link-type access ；设接口类型为接入模式core s9303-1-GigabitEthernet1/0/6port default vlan 60 ；把端口添加到vlan60中core s9303-1-GigabitEthernet1/0/6quitcore s9303-1display vlan 60 ；查看vlan60的配置core s9303-1interface GigabitEthernet 1/0/5core s9303-1-GigabitEthernet1/0/5combo coppercore s9303-1-GigabitEthernet1/0/5port default vlan 50core s9303-1-GigabitEthernet1/0/5quitcore s9303-1interface Vlanif 50core s9303-1-Vlanif50ip address 50.50.50.2 24core s9303-1-Vlanif50quitcore s9303-1interface Vlanif 60core s9303-1-Vlanif60ip address 60.60.60.2 24core s9303-1-Vlanif60quitcore s9303-1display vlan 50VLAN ID Type Status MAC Learning Broadcast/Multicast/Unicast Property -50 common enable enable forward forward forward default -Untagged Port: GigabitEthernet1/0/5 -Tagged Port: GigabitEthernet1/0/1 -Interface Physical GigabitEthernet1/0/1 DOWN GigabitEthernet1/0/5 UP core s9303-1interface GigabitEthernet 1/0/0core s9303-1-GigabitEthernet1/0/0port default vlan 100 core s9303-1-GigabitEthernet1/0/0quitcore s9303-1ripcore s9303-1-rip-1network 50.0.0.0core s9303-1-rip-1network 60.0.0.0core s9303-1-rip-1network 100.0.0.0 -交换机you的设置：（华为5328设置）system-view youvlan 20you-vlan20port GigabitEthernet 0/0/20 ；把端口加到vlan中you-vlan20quityouinterface Vlanif 20you-Vlanif20ip address 20.20.20.2 24you-Vlanif20quityouvlan 50you-vlan50port GigabitEthernet 0/0/5you-vlan50quityouinterface Vlanif 50you-Vlanif50ip address 50.50.50.1 24you-Vlanif50quityouinterface Vlanif 1you-Vlanif1ip address 10.10.10.2 24you-Vlanif1vrrp vrid 1 virtual-ip 10.10.10.111you-Vlanif1vrrp vrid 2 virtual-ip 10.10.10.112you-Vlanif1vrrp vrid 2 priority 120you-Vlanif1vrrp vrid 2 preempt-mode timer delay 20you-Vlanif1quityourip ；启用ripyou-rip-1 version 2 ；用rip版本2you-rip-1 network 10.0.0.0 ；公布网段you-rip-1network 20.0.0.0you-rip-1network 50.0.0.0you-rip-1quitdisplay vrrp ；查看vrrp Vlanif1 | Virtual Router 1 state : Backup Virtual IP : 10.10.10.111 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 120 Preempt : YES Delay Time : 0 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YES Vlanif1 | Virtual Router 2 state : Master Virtual IP : 10.10.10.112 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 120 Preempt : YES Delay Time : 20 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YESyoudisplay ip routing-table ；查看路由表Route Flags: R - relay, D - download to fib-Routing Tables: Public Destinations : 10 Routes : 12Destination/Mask Proto Pre Cost Flags NextHop Interface 10.10.10.0/24 Direct 0 0 D 10.10.10.2 Vlanif1 10.10.10.2/32 Direct 0 0 D 127.0.0.1 InLoopBack0 20.20.20.0/24 Direct 0 0 D 20.20.20.2 Vlanif20 20.20.20.2/32 Direct 0 0 D 127.0.0.1 InLoopBack0 50.50.50.0/24 Direct 0 0 D 50.50.50.1 Vlanif50 50.50.50.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 60.60.60.0/24 RIP 100 1 D 20.20.20.1 Vlanif20 RIP 100 1 D 10.10.10.1 Vlanif1 RIP 100 1 D 50.50.50.2 Vlanif50 100.100.100.0/24 RIP 100 1 D 50.50.50.2 Vlanif50 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack04.测试+(1)vrrp正常状态下测试pc1网关设置：10.10.10.10.111C:Users0173tracert 100.100.100.2通过最多 30 个跃点跟踪到 LJ-2400 100.100.100.2 的路由: 1 3 ms 1 ms 7 ms 10.10.10.1 2 2 ms 2 ms 2 ms 60.60.60.2 3 1 毫秒 tracert 100.100.100.2通过最多 30 个跃点跟踪到 LJ-2400 100.100.100.2 的路由: 1 2 ms 1 ms 1 ms 10.10.10.2 2 2 ms 2 ms 2 ms 50.50.50.2 3 1 毫秒 1 毫秒 注：pc1设置不同的网关，其tracert的路径也不一样，说明vrrp多组配置生效。(2)只断a,查看俩个交换机vrrp状态并测试pc1如何到pc2display vrrp Vlanif1 | Virtual Router 1 state : Initialize Virtual IP : 10.10.10.111 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 0 Preempt : YES Delay Time : 20 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YES Vlanif1 | Virtual Router 2 state : Initialize Virtual IP : 10.10.10.112 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 0 Preempt : YES Delay Time : 0 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YESdisplay vrrp Vlanif1 | Virtual Router 1 state : Master Virtual IP : 10.10.10.111 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 100 Preempt : YES Delay Time : 0 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YES Vlanif1 | Virtual Router 2 state : Master Virtual IP : 10.10.10.112 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 120 Preempt : YES Delay Time : 20 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YES+Pc1网关设置：10.10.10.112C:Users0173tracert 100.100.100.2通过最多 30 个跃点跟踪到 LJ-2400 100.100.100.2 的路由: 1 1 ms 2 ms 2 ms 10.10.10.2 2 2 ms 2 ms 2 ms 50.50.50.2 3 1 毫秒 1 毫秒 Pc1设置网关：10.10.10.111C:Users0173tracert 100.100.100.2通过最多 30 个跃点跟踪到 LJ-2400 100.100.100.2 的路由: 1 1 ms 1 ms 1 ms 10.10.10.2 2 2 ms 2 ms 2 ms 50.50.50.2 3 1 毫秒 1 毫秒 ！(3)只断c,查看vrrp状态并测试pc1如何到pc2display vrrp Vlanif1 | Virtual Router 1 state : Backup Virtual IP : 10.10.10.111 PriorityRun : 100 PriorityConfig : 100 MasterPriority : 120 Preempt : YES Delay Time : 0 Accept_mode : NO V2v3interop : NO Timer : 1 Master adver Timer : 1 Auth Type : NONE Check TTL : YES Vlanif1 | Virtual Router 2 state : Master Virtual IP : 10.10